CVEs
Browse the synced catalog, newest first.
- CVE-2026-125347Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-125345Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-111729In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive…Eclipse Foundation Eclipse Kura
- CVE-2026-97401In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the…Eclipse Foundation Eclipse Kura
- CVE-2026-112186In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no…Eclipse Foundation Eclipse Kura
- CVE-2026-112185In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not…Eclipse Foundation Eclipse Kura
- CVE-2026-126050apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()apitrace
- CVE-2026-126049Gwenhywfar 5.14.2 Use-After-Free via GWEN_TLV_Buffer_To_DB() Nested BER-TLV ParsingMartin Preuss Gwenhywfar
- CVE-2026-126048Gwenhywfar 4.99.8beta before 5.14.2 Stack Buffer Overflow via GWEN_TLV_Buffer_To_DB()Martin Preuss Gwenhywfar
- CVE-2026-125125compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error messagetmatens compose-lint
- CVE-2026-97891In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication…Eclipse Foundation Eclipse Kura
- CVE-2026-125124compose-lint: Text in a pull request can reach Azure Pipelines as logging commands through compose-lint 0.31.0's outputtmatens compose-lint
- CVE-2026-125123compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messagestmatens compose-lint · compose-lint
- CVE-2026-125122compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdouttmatens compose-lint · compose-lint
- CVE-2026-92684Aggregation queries can bypass authentication restrictions in @neo4j/graphql@neo4j/graphql
- CVE-2026-125121compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's outputtmatens compose-lint · compose-lint
- CVE-2026-57907WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code ExecutionWatchGuard Endpoint Security
- CVE-2026-126042VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variablesvnotex VNote
- CVE-2026-63653Group-Office: SSRF via Bookmark/description JMAP action — server makes arbitrary HTTP(S) requests to user-controlled URL and reflects part…Intermesh groupoffice
- CVE-2026-63011GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labelsIntermesh groupoffice
- CVE-2026-63010Group-Office: Stored XSS via Manual RemindersIntermesh groupoffice
- CVE-2026-115791Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extractionPython Software Foundation CPython
- CVE-2026-125271AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalizationaws-api-mcp-server
- CVE-2026-57884Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an…Intel(R) Graphics Software
- CVE-2026-82518Akamai CLI before 2.0.6 Path Traversal via cli.json Command NamesAkamai CLI
- CVE-2026-56438Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege.libva software
- CVE-2026-50177Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…Intel(R) Neural Compressor software
- CVE-2026-50109Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of…Intel(R) Performance Counter Monitor (Intel(R) PCM)
- CVE-2026-49028Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…Intel(R) Neural Compressor software
- CVE-2026-46632Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may allow an…Intel(R) Application Optimization User Interface